I am using traefik as an ingress for the cluster and sidecar injection is also enabled for it, there are few ingress defined which point to a service in another namespace.
I enabled mtls in the cluster, it works fine for services in same namespace, but traffic between traefik pod and the service mentioned in ingress is not getting encrypted, rather it shows in kiali that traffic is going to the target service via “PassThroughCluster”.
Expected behaviour was traffic between traefik and the target ingress service should also be encrpyted if they are part of the mesh but that is not the case
Istio version in 1.8.1
Will appreciate help on this.